Understand risks.
Separate causes and consequences.
Generate management dashboard.
Risk management is barrier management. Barrier management is task management.
The BowTie risk management portal makes risks controllable: threats, risks, and consequences are clearly separated.
Barriers are managed as concrete tasks with owners,
deadlines, status, and effectiveness. Risk scores
indicate which risks are material. This turns individual
BowTie models into a reliable enterprise-wide
management dashboard.
Concept by project biz · developed by factory · operated as a SaaS solution
Separate causes and consequences
The BowTie structure consistently separates: what triggers a risk, what results from it, and which barrier works where. This creates clarity that Excel-based lists cannot provide.
Risk scores calculation
Threat level, consequence costs, mitigation effort, and benefit perspective are combined into a calculated risk score – forming the basis for transparent budgeting decisions.
A unified management dashboard for all risks
Business risks, process risks, IT risks, and supplier risks – all consolidated into an aggregated management dashboard for management and stakeholders.
Not just visualizing risks.
Make barriers effective.
Classical BowTie analyses illustrate relationships. The BowTie portal goes further: each barrier becomes a controllable action – with an owner, due date, status, costs, effectiveness, and approval. This turns risk management into an operational discipline: risks are not only assessed, but actively reduced.
Included: Migration of your existing Excel risk registers and adaptation to BowTie modelling in the portal – ensuring that existing Excel risk lists are not lost, but transformed into controllable BowTie models.
Structure threats, risks, consequences, and barriers in a systematic way.
Each action is assigned an owner, due date, status, and approval.
Excel risk registers are migrated and transformed into BowTie models.
+49 211 38732154 · Dr. Manfred Fitzner · factory
The logic of the BowTie model
Each risk is modelled as a chain of relationships: what triggers it, what it causes if it occurs, and which barriers act in between. This transforms an abstract risk list into a controllable model with accountability, cost relevance, and clear management insight.
Organizational, technical, legal, personnel, IT, partners, natural hazards, misconduct, financial – all sources of threats are systematically captured. Expandable online.
Liability claims, reputational damage, inability to deliver, quality loss, customer loss, contract breaches, and more – systematically assess cost impacts per type. Expandable online.
New laws, new technologies, new partners, and new threat landscapes change the risk profile. The risk inventory systematically checks whether the current risk picture is still up to date. Expandable online.
→ Threat prevent
→ Reduce the impact of the threat on the risk
→ Estimate costs for implementing the barriers
→ Consequence prevention
→ Reduce the impact of the consequence
→ Estimate costs for implementing the barriers
Risk management across organizational boundaries
Suppliers bring their own risks through products, services, and dependencies. Partners introduce interdependencies. Processes connect departments. The BowTie portal models all of this in a single system – and consolidates it into one unified management dashboard.
Enterprise-wide management dashboard
Business risks, process risks, IT risks, asset risks, supplier risks – all risk dimensions are consolidated into a single aggregated dashboard. Management sees the overall risk at a glance.
USP · Unique overviewIntegrated supplier risk management
Suppliers introduce risks. The platform captures these as full BowTie models – using the same structure for threats, barriers, consequences, and risk scores as internal risks.
USP · Supply chain visibilityCost transparency in risk management
Threat exposure, consequence costs, mitigation costs, and benefit perspectives are calculated. Risk mitigation budgets become transparent and justifiable. Costs and benefits of barriers are comparable.
USP · Decision-readyOperational task management
Barriers and measures are assigned owners, deadlines, status, and approvals. Risk management runs as a continuous control process – with reminders, alerts, and escalations.
Monitoring · TrackingClear roles and accountability
Executives, risk managers, business unit leaders, risk owners, and risk teams work in one system. Responsibilities are visible and delegations are traceable.
Roles · GovernanceReplace Excel lists
Instead of isolated spreadsheet entries, traceable BowTie models are created. Relationships between threats, consequences, barriers, and costs become visible, analyzable, and reportable.
Migration from ExcelAnswers to the questions that matter
The portal consolidates individual risks into a reliable management dashboard. Management, executives, and supervisory boards receive clear answers.
For each risk, threat landscapes, consequences, and potential cost impacts are aggregated and visualized in the dashboard. This allows management to identify material risks across departments and processes.
Effort, benefit, and impact of each barrier are evaluated. Budgets become justifiable. Measures with the highest contribution to risk reduction become visible.
Comparable reports show how the risk profile develops – and provide evidence that risks are being actively managed.
Risk alerts, thresholds, and escalations are configurable. The system provides proactive notifications – before a risk becomes an incident. New threat landscapes are systematically assessed through a risk inventory.
The management controls the overall risk situation. The key question is whether the total risk exposure still fits the company's risk capacity. The dashboard shows risk buffers, warning thresholds, and required actions at a glance.
The risk manager is formally appointed and documented. Required qualifications are stored in a verifiable way. Risk management is a management responsibility – the BowTie portal documents roles, qualifications, and appointments in an audit-ready format.
What organizations demand – and how the BowTie portal responds
Yes, they are migrated and integrated into the model.
BowTie models show relationships: threats, risk, consequences, and barriers in a single view. What used to be a single row becomes a traceable model with context, accountability, and cost relevance.
For each barrier, effort, impact, and benefit are evaluated. The risk score is calculated from threat exposure and potential consequence costs. This makes it visible which measures deliver the greatest impact – and what happens if a barrier is missing.
Supplier risks are captured as full BowTie models – including threats, consequences, barriers, and risk scores. They are integrated into the enterprise-wide dashboard. Dependencies become visible and manageable.
BowTie-biz provides a management dashboard that is also accessible on mobile devices. The aggregated management dashboard consolidates all individual risks into a single view: risk scores, threat landscapes, mitigation status, alerts, and priorities – accessible for management, risk teams, and business units alike.
Risk management software instead of Excel risk registers
Many organizations still manage risks in Excel spreadsheets. This works for an initial collection, but not for effective control. The BowTie portal combines risk registers, the BowTie methodology, action management, and a management dashboard in one SaaS solution. This makes threats, consequences, barriers, responsibilities, and risk scores transparent, traceable, and actionable.
Replace risk registers
Isolated list entries are transformed into interconnected BowTie models – with threats, consequences, and controllable barriers instead of plain spreadsheet rows.
Enterprise risk management
Business, process, technical, supplier, and regulatory risks are consolidated into an enterprise-wide management dashboard – for executives, compliance, and supervisory boards.
Internal control system (ICS)
Barriers are documented as controls, assigned to responsible owners, and tracked in status – making ICS compliance verifiable. Risk management and control management in one system.
Questions about the BowTie risk management portal
What is the BowTie method and why is it better than a risk register?
The BowTie method models risks as a structure: on the left are the threats that trigger a risk, in the center is the risk event, and on the right are the potential consequences. Barriers act in between. A risk register captures risks in isolation. The BowTie model makes causes, effects, and countermeasures visible – and therefore actionable.
Who is the BowTie portal suitable for?
The portal is designed for executives, risk managers, risk owners, business units, as well as compliance, IT, and asset management professionals. It is particularly suitable for organizations that want to systematically manage risks arising from processes, technology, suppliers, personnel, and regulatory requirements.
How are supplier risks included?
Supplier risks are captured as full BowTie models – using the same structure as internal risks. They are integrated into the enterprise-wide dashboard, making dependencies on suppliers, products, and services visible and manageable.
Who designed and developed the platform?
The methodology and conceptual framework were developed by the consultancy project biz. The technical implementation as a SaaS platform was carried out by factory – the software division of pbf project business factory GmbH.
Replace Excel risk registers – view the portal live.
We demonstrate how the BowTie portal structures your risks, migrates your existing Excel lists, and consolidates them into a reliable management dashboard – in a free 15-minute introductory call.